EUVD-2006-5485

Malware in sbrugna...

CVE-2006-5488

The CVE-2006-5488 entry documents a SQL injection in XchangeBoard 1.70 (and potentially earlier) when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login. The cited sources (NVD, CVE list, and third-par...